CVE-2019-3495

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices

published March 18, 2019

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable to arbitrary file upload, allowing an attacker to upload .php files and execute code on the server with root user privileges. Authentication for accessing this component can be bypassed by using Hard coded credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04945 · 92.1th percentile
Published
2019-03-18T17:14Z
EPSS history
Timeline
  • 18 MAR 17:14Z
    An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices
    cvelistv5